27. Buffer Overflow Attack Quiz

What is a buffer overflow attack?

• An attack where an attacker reads more data than expected.

• An attack where an attacker encrypts data in memory.

• An attack where an attacker writes more data than expected into a memory area.

• An attack where an attacker deletes data from memory.

What is the role of application developers in preventing buffer overflow attacks?

• They perform bounds checking to ensure only the expected amount of data is written.

• They encrypt all data in memory.

• They delete all unused memory sections.

• They monitor network traffic for suspicious activity.

Why is exploiting a buffer overflow vulnerability not simple?

• It always requires physical access to the system.

• It can cause the system or application to crash unexpectedly.

• It requires special hardware.

• It is illegal in most countries.

What are attackers looking for in a buffer overflow exploit?

• A vulnerability that requires user interaction.

• A vulnerability that only works once.

• A vulnerability that is always repeatable and advantageous.

• A vulnerability that is random and unpredictable.

In the example provided, what does variable B control?

• The rights and permissions of the user.

• The color scheme of the application.

• The speed of the application.

• The network settings.

What value must variable B exceed to grant administrative rights?

• 24,000

• 50,000

• 1,000

• 2,000

How many bytes does variable A have in the example?

• 8 bytes

• 9 bytes

• 7 bytes

• 6 bytes

What word does the attacker use to overflow variable A?

• Overflow

• Attack

• Buffer

• Excessive

What is the hex value of the letter 'e' used in the overflow?

• 0x65

• 0x61

• 0x62

• 0x63

What is the new value of variable B after the buffer overflow?

• 50,000

• 1,979

• 24,000

• 2,856